Passkey (authentication)
A passkey is a digital credential that is used as an authentication method for a website or application.[1][2][3] The passkeys standard is a type of passwordless authentication, promoted by the World Wide Web Consortium and the FIDO Alliance.[4] They are often stored by the operating system or web browser and synchronized between devices from the same ecosystem using the cloud,[1][5] however they can also be confined to a single device such as a physical security key.[2]
Passkeys are designed to be more convenient and phishing-resistant than conventional authentication methods.[4][6] They are normally secured using possession (of the device or security key), and often utilize biometrics as an additional security factor, neither of which require the user to memorize a password. As of September 2023, over 99% of devices support WebAuthn, showcasing a broad readiness for passkey technology.[7]
In marketing material, the terms passkey or passkeys are preferred over related terms such as FIDO or WebAuthn, because they are less likely to cause confusion.[8] It is a common misconception that passkeys are specific to Apple devices.[8]
History
The term passkeys was popularized in May 2022 by Google[9] and in June 2022 by Apple,[6][1] when they announced they would be adding support for the passkeys standard. This was the first time that most people had heard the term, and many assumed that it was specific to Apple. However, the term is also used by other companies such as Microsoft and Google,[8] and therefore should be used as a common noun (i.e. lowercase except when starting a sentence).[8][2][4]
Google announced that Android and Google Chrome would support passkeys in October 2022[10] and support for personal Google Accounts in May 2023.[11]
Dashlane was the first company to support storing passkeys in a web browser extension, with the public release in August 2022,[5] followed by NordPass in February 2023,[12] and 1Password in September 2023.[13] In May 2023, Google announced it is incorporating passkeys into its login services.[14]
Other password managers have plans to support this in the future.[15]
References
- Shein, Esther (6 June 2022). "Apple touts Passkey, its new privacy feature, at WWDC 2022". TechRepublic. TechnologyAdvice. Retrieved 27 April 2023.
- "Passkeys (Passkey Authentication)". FIDO Alliance. FIDO Alliance. Retrieved 27 April 2023.
- "Passwordless login with passkeys". Google Developers. Google. Retrieved 27 April 2023.
- "Expansion of FIDO standard and new updates for Microsoft passwordless solutions". Tech Community. Microsoft. Retrieved 27 April 2023.
- "Ushering in the Passwordless Future at Dashlane". Dashlane. Dashlane. Retrieved 4 May 2023.
- Clemons, Taylor (6 June 2022). "WWDC 2022: Apple announces Passkey feature to eliminate passwords across platforms". ZDNET. Retrieved 27 April 2023.
- "Why PayPal's global Passkey Rollout makes sense: September 2023 Update & Insights into Passkey-Readiness". www.corbado.com. Retrieved 2023-10-25.
- Shakir, Umar (6 August 2022). "Reminder: passkeys are not just from Apple". The Verge. Vox Media. Retrieved 27 April 2023.
- "The beginning of the end of the password".
- Nield, David (16 October 2022). "How to Use Passkeys in Google Chrome and Android". WIRED. Condé Nast. Retrieved 4 May 2023.
- Burt, Jeff (4 May 2023). "Google opens up passkeys to personal account holders". The Register. Situation Publishing. Retrieved 4 May 2023.
- "What Is a Passkey?". NordPass. Nord Security. Retrieved 4 May 2023.
- "Now available: Save and sign in with passkeys using 1Password in the browser and on iOS | 1Password". 1Password Blog. 2023-09-20. Retrieved 2023-09-29.
- ThioJoe (28 May 2023). "Google Accounts Just Got an AWESOME New Feature". YouTube. Retrieved 17 June 2023.
- "Bitwarden Roadmap 2023". Vimeo. Bitwarden. Retrieved 4 May 2023.